Corrigibility with Utility Preservation